This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft File: 9SHhdPhPcWWWHUG2jqcmLigzfWk.mft (raw, json) Hash identifier: +I1MQKq3qbNMRQvZEb5xbLXTTOiotILLuKuomzoLTpo= Subject key identifier: 72:CB:69:A4:5B:93:4C:02:54:22:D0:94:53:D0:24:E4:7F:03:A0:B1 Authority key identifier: F5:21:E1:74:F8:4F:71:65:96:1D:41:B6:8E:A7:26:2E:28:33:7D:69 Certificate issuer: /CN=f521e174f84f7165961d41b68ea7262e28337d69 Certificate serial: 019AF3527CEADDC8CD2E28DBDA09E88BDCCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft Manifest number: E3 Signing time: Sat 06 Dec 2025 11:01:00 +0000 Manifest this update: Sat 06 Dec 2025 11:01:00 +0000 Manifest next update: Sun 07 Dec 2025 11:01:00 +0000 Files and hashes: 1: 9SHhdPhPcWWWHUG2jqcmLigzfWk.crl (hash: ZaHen2xExocXgdBkvqeBfU9X/Wat5nts/dBv6Ma2OtM=) 2: lREmYeBzk04tbp8GeH-LaDXphtg.roa (hash: zft8RW61aCX4pWyWaUhcgfulMxE/7ocT5F98zoTjm/E=) 3: yTtKVX1UAMcHekyo2zXGvrkQM1I.roa (hash: mdzZIhlGgkU8tIHOKHpSUYEIhlckxiDvx7lT5oQ6M5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.crl rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:7c:ea:dd:c8:cd:2e:28:db:da:09:e8:8b:dc:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f521e174f84f7165961d41b68ea7262e28337d69 Validity Not Before: Dec 6 11:01:00 2025 GMT Not After : Dec 7 11:01:00 2025 GMT Subject: CN=72cb69a45b934c025422d09453d024e47f03a0b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:88:9b:8d:ff:a1:99:19:c3:c2:31:5b:76:1d: be:8e:7d:a9:6d:0c:f9:b8:a5:f8:ef:15:65:43:ff: a1:cc:3e:78:68:88:2f:86:3b:76:2f:6c:32:66:25: c2:28:ed:6d:20:9d:f8:2b:fc:47:3e:6d:4a:09:48: 3e:32:bf:3e:95:c9:df:af:ae:2a:fb:fe:f7:65:4a: 4e:59:dc:d2:93:0d:ed:6a:9b:76:68:fc:b3:c0:69: e0:9a:65:b5:3f:eb:52:77:47:5a:37:c6:b8:75:d3: 12:56:42:40:f5:d4:23:20:be:81:17:25:a7:d9:e1: 58:40:e3:7b:ef:1f:79:2d:0b:9f:c6:fb:98:7b:fd: f3:8a:ed:64:88:d0:c2:5c:ad:63:0c:ff:55:2a:3c: 12:86:e9:60:81:90:17:2b:f2:f1:0f:18:6e:16:2c: 1b:c1:91:67:e8:17:70:a9:c9:8f:9a:00:0e:19:8e: 90:80:25:30:13:a7:bb:88:19:97:15:03:e6:4f:f4: cd:58:42:eb:c2:be:92:12:14:c8:93:92:03:41:e8: b3:67:71:14:35:dc:75:aa:b1:5c:a5:86:f3:66:7f: 64:75:01:52:fa:c8:bc:20:00:7a:03:c0:4e:3a:d6: eb:1e:23:41:32:8c:a1:3b:76:c4:cf:0e:c3:63:dc: 6c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:CB:69:A4:5B:93:4C:02:54:22:D0:94:53:D0:24:E4:7F:03:A0:B1 X509v3 Authority Key Identifier: keyid:F5:21:E1:74:F8:4F:71:65:96:1D:41:B6:8E:A7:26:2E:28:33:7D:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:4f:19:2b:79:99:78:c4:e4:2a:57:b4:28:56:0c:72:7f:05: 68:a8:20:15:0e:12:2a:52:f1:1d:e0:ce:bd:e9:4d:53:5d:8e: 07:1e:59:1e:6d:71:1b:af:ad:67:50:b0:00:d0:ac:48:ac:93: 5a:3d:79:78:bd:dd:d3:0f:cf:29:fa:53:30:9c:3e:7d:c7:3f: f5:2c:db:90:8e:7c:1d:10:5b:d7:56:95:dc:a7:38:84:d6:be: 64:b3:16:dc:f3:42:d7:52:29:e9:d5:89:6f:10:1e:c9:65:02: ef:94:f0:a3:6c:ea:6a:b6:2b:33:29:7e:8f:58:3d:94:ec:12: 9c:8a:f8:11:13:60:9a:45:a9:cb:11:1d:95:ef:63:fd:a4:18: 63:2a:7c:56:26:eb:14:30:7e:33:5a:30:92:00:78:71:5c:e0: e9:ff:63:25:6d:19:7b:05:1d:af:e3:ed:8e:10:c8:7c:92:18: d2:e5:15:9d:fe:2f:51:35:ac:72:fc:b0:20:83:a3:ae:7a:47: df:56:16:a0:b7:51:ce:b4:85:3f:64:fa:2f:b1:79:c5:78:ee: 2c:74:e7:bd:1a:0e:5e:2a:1e:5f:8b:b3:b3:b6:0c:b8:9f:99: c9:cb:27:7c:4f:24:45:04:90:57:3a:5f:b8:4b:18:87:9e:e9: 32:38:d7:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUnzq3cjNLijb2gnoi9zLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MjFlMTc0Zjg0ZjcxNjU5NjFkNDFiNjhlYTcyNjJlMjgz MzdkNjkwHhcNMjUxMjA2MTEwMTAwWhcNMjUxMjA3MTEwMTAwWjAzMTEwLwYDVQQD Eyg3MmNiNjlhNDViOTM0YzAyNTQyMmQwOTQ1M2QwMjRlNDdmMDNhMGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIibjf+hmRnDwjFbdh2+jn2pbQz5 uKX47xVlQ/+hzD54aIgvhjt2L2wyZiXCKO1tIJ34K/xHPm1KCUg+Mr8+lcnfr64q +/73ZUpOWdzSkw3tapt2aPyzwGngmmW1P+tSd0daN8a4ddMSVkJA9dQjIL6BFyWn 2eFYQON77x95LQufxvuYe/3ziu1kiNDCXK1jDP9VKjwShulggZAXK/LxDxhuFiwb wZFn6BdwqcmPmgAOGY6QgCUwE6e7iBmXFQPmT/TNWELrwr6SEhTIk5IDQeizZ3EU Ndx1qrFcpYbzZn9kdQFS+si8IAB6A8BOOtbrHiNBMoyhO3bEzw7DY9xsYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHLLaaRbk0wCVCLQlFPQJOR/A6CxMB8GA1UdIwQY MBaAFPUh4XT4T3Fllh1Bto6nJi4oM31pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVNIaGRQaFBjV1dXSFVHMmpxY21MaWd6ZldrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kOWEwMTAtZDVmNy00NjYxLThkMzIt ZGQwNjExMWYzZjk2LzEvOVNIaGRQaFBjV1dXSFVHMmpxY21MaWd6ZldrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9kOWEwMTAtZDVmNy00NjYxLThkMzItZGQwNjExMWYzZjk2 LzEvOVNIaGRQaFBjV1dXSFVHMmpxY21MaWd6ZldrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnU8ZK3mZ eMTkKle0KFYMcn8FaKggFQ4SKlLxHeDOvelNU12OBx5ZHm1xG6+tZ1CwANCsSKyT Wj15eL3d0w/PKfpTMJw+fcc/9SzbkI58HRBb11aV3Kc4hNa+ZLMW3PNC11Ip6dWJ bxAeyWUC75Two2zqarYrMyl+j1g9lOwSnIr4ERNgmkWpyxEdle9j/aQYYyp8Vibr FDB+M1owkgB4cVzg6f9jJW0ZewUdr+PtjhDIfJIY0uUVnf4vUTWscvywIIOjrnpH 31YWoLdRzrSFP2T6L7F5xXjuLHTnvRoOXioeX4uzs7YMuJ+ZycsnfE8kRQSQVzpf uEsYh57pMjjXlA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:25:41 2025 by rpki-client